@xulthekl/team-flow 0.31.0 → 0.32.1

package/.claude/always/phase-guard.md

@@ -1,3 +1,3 @@
-# team-flow v0.31.0 | 阶段: {{state}} | 工作流: {{workflow}}
+# team-flow v0.32.1 | 阶段: {{state}} | 工作流: {{workflow}}
 当前阶段允许的操作由 workflow-start 路由规则定义。
 禁止跨越 DP gate 进入下一阶段。变更范围以 execution-contract.md 的 Intent Lock 为准。

package/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "description": "Unified workflow plugin: team-flow + compound-engineering core subset + architecture-design + prototype + workflow-orchestrator + workflow-bootstrap + e2e + session-handoff + workflow-feedback. 23 skills + 15 agents, one install.",
+  "description": "Unified workflow plugin: team-flow + compound-engineering core subset + architecture-design + prototype + workflow-orchestrator + workflow-bootstrap + e2e + session-handoff + workflow-feedback. 24 skills + 15 agents, one install.",
   "owner": {
     "name": "LT",
     "url": "https://github.com/LT"
@@ -8,8 +8,8 @@
   "plugins": [
     {
       "name": "team-flow",
-      "description": "8-state spec workflow + compound global compounding + architecture-design (4A/DDD) + local HTML prototype + product-level orchestration + bootstrap + e2e + session handoff + workflow feedback. 23 skills + 15 agents with embedded TDD, SDD, code review, debugging, delta spec sync, and design-system-driven prototyping.",
-      "version": "0.31.0",
+      "description": "8-state spec workflow + compound global compounding + architecture-design (4A/DDD) + local HTML prototype + product-level orchestration + bootstrap + e2e + session handoff + workflow feedback. 24 skills + 15 agents with embedded TDD, SDD, code review, debugging, delta spec sync, and design-system-driven prototyping.",
+      "version": "0.32.1",
       "source": "./",
       "author": {
         "name": "LT",

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.31.0",
+  "version": "0.32.1",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking). 24 skills + 15 agents, one install.",
   "source": "./",
   "author": {

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.31.0",
+  "version": "0.32.1",
   "description": "Spec-first workflow that bridges OpenSpec-style planning and Superpowers-style execution discipline.",
   "author": {
     "name": "MageByte",
@@ -26,7 +26,7 @@
   "interface": {
     "displayName": "team-flow",
     "shortDescription": "Spec-first workflow with guarded execution.",
-    "longDescription": "A self-contained Codex workflow plugin with nine skills for intent exploration, planning artifacts, execution contracts, TDD execution, review gates, systematic debugging, closure, and delta spec sync.",
+    "longDescription": "A self-contained Codex workflow plugin with 24 skills for intent exploration, planning artifacts, execution contracts, TDD execution, review gates, systematic debugging, closure, and delta spec sync.",
     "developerName": "MageByte",
     "category": "Developer Tools",
     "composerIcon": "./assets/icon.svg",

package/.cursor-plugin/marketplace.json

@@ -5,13 +5,13 @@
   },
   "metadata": {
     "description": "Unified workflow plugin marketplace for Cursor (team-flow: team-flow + compound + architecture-design + prototype).",
-    "version": "0.31.0"
+    "version": "0.32.1"
   },
   "plugins": [
     {
       "name": "team-flow",
       "source": ".",
-      "description": "Unified workflow plugin: team-flow + compound-engineering core subset + architecture-design + prototype. 17 collaborative skills."
+      "description": "Unified workflow plugin: team-flow + compound-engineering core subset + architecture-design + prototype. 24 skills + 15 agents."
     }
   ]
 }

package/.cursor-plugin/plugin.json

@@ -1,8 +1,8 @@
 {
   "name": "team-flow",
   "displayName": "team-flow",
-  "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking). 23 skills + 15 agents, one install.",
-  "version": "0.31.0",
+  "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking). 24 skills + 15 agents, one install.",
+  "version": "0.32.1",
   "author": {
     "name": "LT",
     "url": "https://github.com/LT"

package/.github/plugin/marketplace.json

@@ -6,13 +6,13 @@
   },
   "metadata": {
     "description": "Unified workflow plugins and skills for AI coding agents (team-flow: team-flow + compound + architecture-design + prototype).",
-    "version": "0.31.0"
+    "version": "0.32.1"
   },
   "plugins": [
     {
       "name": "team-flow",
       "description": "Unified workflow with planning artifacts, execution contracts, TDD, review gates, systematic debugging, delta spec sync, architecture-design, and local HTML prototyping.",
-      "version": "0.31.0",
+      "version": "0.32.1",
       "source": ".",
       "author": {
         "name": "LT",

package/AGENTS.md

@@ -1,6 +1,6 @@
 # AGENTS.md · team-flow
 
-> team-flow 统一插件 = **team-flow**（spec 驱动开发）+ **compound-engineering 核心子集**（全局复利）+ **architecture-design**（4A+DDD 增量设计）+ **prototype**（本地 HTML 原型）+ **e2e**（AC 驱动 Playwright E2E）+ **workflow-orchestrator**（产品级编排）+ **workflow-bootstrap**（既有项目接入）。一次安装，七套能力协同（23 skills + 15 agents），支持 9 安装面（Claude Code, Cursor, OpenAI Codex CLI/App, GitHub Copilot CLI, Gemini CLI, OpenCode, WorkBuddy, Trae, ima-copilot）。
+> team-flow 统一插件 = **team-flow**（spec 驱动开发）+ **compound-engineering 核心子集**（全局复利）+ **architecture-design**（4A+DDD 增量设计）+ **prototype**（本地 HTML 原型）+ **e2e**（AC 驱动 Playwright E2E）+ **workflow-orchestrator**（产品级编排）+ **workflow-bootstrap**（既有项目接入）。一次安装，七套能力协同（24 skills + 15 agents），支持 9 安装面（Claude Code, Cursor, OpenAI Codex CLI/App, GitHub Copilot CLI, Gemini CLI, OpenCode, WorkBuddy, Trae, ima-copilot）。
 
 ## What This Is
 
@@ -12,7 +12,7 @@
 
 ### 身份与依赖关系
 
-- **team-flow**（本插件）：Claude Code / Cursor 等宿主的插件实体（`plugin.json` name = `team-flow`），包含 23 个 skills + 15 个 agents + hooks + templates
+- **team-flow**（本插件）：Claude Code / Cursor 等宿主的插件实体（`plugin.json` name = `team-flow`），包含 24 个 skills + 15 个 agents + hooks + templates
 - **@xulthekl/team-flow**（npm 底座包）：team-flow 的 CLI 工具层（`package.json` name = `@xulthekl/team-flow`，bin = `tf` / `team-flow`），提供状态机、校验、复利 CLI 等运行时能力
 - 关系：team-flow 插件 **包含** @xulthekl/team-flow npm 包作为底座（同一仓库、同一版本）。skills 中的 `tf ...` 调用的是已全局安装的 @xulthekl/team-flow CLI，版本由 session-start hook 自动同步
 - 历史身份（已废弃）：`spec-superflow`（npm 包名，0.11.0 后停止发布）/ `ssf`（CLI 前缀）/ `.spec-superflow.yaml`（状态文件）—— 详见设计增强方案 v0.9 §27
@@ -33,7 +33,7 @@ node --test tests/e2e.test.mjs --test-name-pattern="parseDeltaSpec"
 npm run validate
 ```
 
-## 能力概览（九套合一，23 skills）
+## 能力概览（九套合一，24 skills）
 
 ### 1. team-flow（底座，9 skills）
 spec 驱动开发过程。8 态变更机：`exploring → specifying → bridging → approved-for-build → executing → closing`（另有 `debugging` 侧路径 + `abandoned` 终态）。

package/CHANGELOG.md

@@ -6,6 +6,53 @@ The format loosely follows Keep a Changelog.
 
 ## [Unreleased]
 
+## [0.32.1] - 2026-08-03
+
+> 版本号说明：0.32.0 因 `.npmignore` 缺失 `/tests/` 排除项，误将 61.8M e2e 基线归档打入 tarball（72MB），发布后 30 分钟内撤回；npm 版本号一经发布不可复用，故以 **0.32.1** 重发（内容完全一致 + 打包修复）。
+
+### Added（设计增强方案 v0.13 §47-§53 测试门禁硬化——C1-domain-policy 事件修复）
+
+#### 豁免键修正（v0.13 §48）
+- **scripts/lib/state-loader.mjs**：BUILTIN_DEFAULTS 新增 `test_matrix_skip_reason` / `test_evidence_path`；`schema_version` 不进 defaults（字段缺失 = 存量信号）；writeState 条件序列化 `schema_version`
+- **scripts/lib/cmd-state.mjs**：init 分支仅在 change 创建（状态文件尚不存在）时打戳 `schema_version: 1`（rebuild/set 不追加）；SETTABLE_FIELDS 移除 `test_result`、新增 `test_matrix_skip_reason`；`test_result`/`schema_version` 手工 set 被拒并给引导
+- **scripts/guard/checks/test-gate-exemptions.mjs**：新建共享豁免判定模块（legacy/skip 语义唯一真相源，防三个测试门禁漂移）
+- **scripts/guard/checks/test-matrix-complete.mjs**：重写——legacy/skip 双豁免；删除内容型豁免（contract 无 `## Test Matrix` 段即 PASS）与"无 contract → PASS"；删除 hash null 短路；skip 必附理由
+
+#### 门禁前移（v0.13 §49）
+- **scripts/guard/checks/test-matrix-ready.mjs**：新建入口维度（矩阵存在非空 + contract 声明段 OR 显式 skip 附理由；legacy 豁免）
+- **scripts/guard/guard.mjs**：full `approved-for-build:executing` 新增 `test-matrix-ready`（hotfix/tweak 沿用 §45.3 豁免不挂）
+
+#### tests-passing 证据程序化（v0.13 §50，BUG-A 政策修正）
+- **scripts/lib/test-record.mjs**：新建 `tf test record` 命令——maven-surefire（控制台汇总行 + XML 报告目录）/jest(--json)/pytest 解析器 + auto 识别；结构化 `test_result`（recorded-by=tf-test-record）+ 证据落盘 `.superpowers/test-evidence/`；fail 结果 exit 1；无手工自述通道
+- **scripts/guard/checks/tests-passing.mjs**：重写——非存量 change 只认程序化结构化记录 + 证据文件存在性；dp_6_result 去证据化（BUG-A 通道仅存量保留）；total=0 空真拒绝；skip 必附理由
+- **scripts/team-flow.mjs**：注册 `test` 命令 + HELP
+
+#### review 硬化 + 巡检扩展（v0.13 §51-§52）
+- **scripts/lib/execution-plan.mjs**：validateReviewRange 禁止 base==head（空 diff review 非法，C1 现场 6 个 receipt 全为空 diff）；receipt 新增可选 `tests` 统计字段（非负整数校验）
+- **scripts/lib/cmd-execution.mjs**：review 新增 `--tests-total/--tests-passed/--tests-failed`（须同时提供）
+- **scripts/lib/cmd-doctor.mjs**：新增 checkChangeTestGates 巡检（skip_reason 配对 + arch_review_report/test_evidence_path 引用完整性）
+- **scripts/lib/cmd-validate.mjs**：test-matrix 双向互锁（契约段↔矩阵文件，非存量非 skip 时 ERROR）+ hash 漂移警告
+
+### Changed（SOP 硬化批次，v0.13 §52）
+- **agents/contract-builder.md**：skills 补 test-strategy 预加载（修复矩阵生成者的预加载断点）+ test-matrix.md 所有权声明
+- **skills/contract-builder/SKILL.md**：Test Matrix Generation 升 MUST（full workflow）+ skip 必附理由
+- **skills/release-archivist/SKILL.md**：Step 1 零测试条款（0 tests ≠ PASS）+ tf test record 程序化记录；Step 2b 矩阵缺失对非存量 change FAIL（删除静默 SKIP）；dp_6 去证据化说明
+- **skills/workflow-start/SKILL.md**：build-executor 返回验证补测试文件检查（SDD/full）；contract-builder 路由声明矩阵必产；入口门禁前移引导
+- **skills/workflow-start/references/routing-rules.md**：Route to glaf4-tests 归位（触发主体 = contract-builder；可选的是工具选择，矩阵生成本身强制）
+- **skills/session-handoff/SKILL.md**：Guardrail #6 报告生成纪律（LLM 重构报告必须现场核对，C1 报告 10+ 处失真教训）
+
+### Fixed（P3 审查横展修复）
+- **skills/workflow-start/SKILL.md**：路由优先级块修正 v0.30.0 引入的存量矛盾——删除"hotfix/tweak 架构设计可跳过（自动写 skipped）"例外句（与 Fast-Path 5 处"不豁免"条款及 v0.9 §26 冲突，且无对应代码行为）；skill-reviewer F-1
+- **skills/release-archivist/SKILL.md** + **skills/contract-builder/SKILL.md**：Lightweight Closure / Hotfix Mode 补非存量 change tests-passing 门禁指引（skip+reason 或 tf test record），修复轻量收尾必然撞门禁的断点；skill-reviewer W-0
+- **agents/contract-builder.md**：DON'T 列表终态标记条款反向措辞修正；skill-reviewer W-2
+- **计数同步**：12 处 manifest/文档的 skill 计数修正为 24 skills（v0.31.0 新增 test-strategy 时漏更的遗留债）；plugin-validator
+
+### Tests
+- tests/lib/schema-version.test.mjs（打戳语义 5 例）、test-record.test.mjs（解析器 9 例 + CLI 6 例）、review-hardening.test.mjs（base==head 拒绝 + 统计字段 4 例）
+- tests/e2e/deterministic/guard-dimensions.test.mjs：test-matrix-complete 重写为 v0.13 六步判定（9 例）+ test-matrix-ready 新 describe（6 例）+ tests-passing 程序化/skip/负向用例
+- tests/lib/cmd-state.test.mjs：test_result/schema_version 拒设用例 + skip_reason 可设用例；tests/lib/guard.test.mjs：closing 前置夹具适配（legacy 夹具直写 yaml 模拟旧 CLI）
+- 全量回归：lib 486/486 + Tier1 e2e 67/67
+
 ## [0.31.0] - 2026-08-01
 
 ### Added（设计增强方案 v0.12 §40-§46 测试矩阵驱动开发 + 测试复利闭环）

package/GEMINI.md

@@ -8,7 +8,7 @@ The workflow is self-contained and does not require OpenSpec or Superpowers at r
 
 
 <!-- team-flow-phase-guard-start -->
-# team-flow v0.31.0 | 阶段: {{state}} | 工作流: {{workflow}}
+# team-flow v0.32.1 | 阶段: {{state}} | 工作流: {{workflow}}
 当前阶段允许的操作由 workflow-start 路由规则定义。
 禁止跨越 DP gate 进入下一阶段。变更范围以 execution-contract.md 的 Intent Lock 为准。
 <!-- team-flow-phase-guard-end -->

package/HANDOFF.md

@@ -23,7 +23,7 @@
 | **e2e**（端到端测试） | 整个 skill | 1 |
 | **session-handoff**（session 交接） | 整个 skill | 1 |
 | **workflow-feedback**（反馈闭环） | 整个 skill | 1 |
-| **合计** | | **23 skills + 15 agents** |
+| **合计** | | **24 skills + 15 agents** |
 
 - 零运行时外部依赖（team-flow 底座自包含）。
 - prototype 额外**零外部依赖、可离线**（自包含 HTML + 页面内 Tweaks 控件，无 CDN）。

package/INSTALL.md

@@ -7,7 +7,7 @@
 - [Fission-AI/OpenSpec](https://github.com/Fission-AI/OpenSpec) — 规划引擎（Schema 验证、Delta Spec、工件解析）
 - [obra/superpowers](https://github.com/obra/superpowers) — 执行纪律（TDD 铁律、SDD、系统化调试、代码审查）
 
-当前发布版本：**v0.31.0**。
+当前发布版本：**v0.32.1**。
 
 ---
 

package/README.md

@@ -1,6 +1,6 @@
 # team-flow
 
-> 当前版本：`v0.31.0`
+> 当前版本：`v0.32.1`
 
 > 统一插件：**team-flow**（spec 驱动开发）+ **compound-engineering 核心子集**（全局复利）+ **architecture-design**（4A+DDD 增量设计）+ **prototype**（本地 HTML 原型）+ **e2e**（AC 驱动 E2E）+ **workflow-orchestrator**（产品级编排）+ **workflow-bootstrap**（既有项目接入）。一次安装，七套能力协同。
 
@@ -34,7 +34,7 @@
 git clone <your-repo> && <cli> plugin install ./team-flow
 ```
 
-> 不同宿主 CLI 的安装子命令略有差异（如 Claude Code 为 `/plugin add`，Cursor 为 `plugin install`）。以宿主文档为准；本插件提供单一 `plugin.json`，一次安装即加载全部 23 个 skills。
+> 不同宿主 CLI 的安装子命令略有差异（如 Claude Code 为 `/plugin add`，Cursor 为 `plugin install`）。以宿主文档为准；本插件提供单一 `plugin.json`，一次安装即加载全部 24 个 skills。
 
 ## 配置（插件层扩展字段）
 

package/agents/contract-builder.md

@@ -28,6 +28,9 @@ color: magenta
 tools: ["Read", "Bash", "Grep", "Glob", "Write", "Edit"]
 skills:
   - contract-builder
+  # v0.13 §52 B1：test-matrix.md 由本 agent 生成，需预加载测试设计方法论
+  #（design_method 选择/复杂度分级/对抗验证），修复 v0.31.0 的预加载断点。
+  - test-strategy
 ---
 
 You are an independent Contract Builder. You compress approved planning artifacts into a single execution handshake: `execution-contract.md`. You operate in an independent context with Write capability for the contract file only.
@@ -36,6 +39,8 @@ You are an independent Contract Builder. You compress approved planning artifact
 
 **You are the sole owner of `execution-contract.md`** within the change directory. No other agent or the orchestration layer may directly edit it. Refresh/adjustment requests MUST be routed through you via `SendMessage` resume; the orchestration layer does not edit your artifact directly.
 
+**You are also the sole owner of `test-matrix.md`**（execution-contract.md 的附属产物，v0.12 §42 / v0.13 §52 B1）：full workflow 的契约必须声明 `## Test Matrix` 段并生成非空矩阵文件（hotfix/tweak 豁免）。矩阵缺失时 `test-matrix-ready`/`test-matrix-complete` 门禁会阻断 executing 入口与 closing。
+
 **Your preloaded Skill contains the detailed methodology** (artifact-to-contract mapping, requirement-coverage cross-check, DP-3 approval gate, stale-contract detection, hotfix minimal contract). Follow it for HOW. This prompt defines WHO you are and WHAT you must deliver.
 
 ## Iron Law
@@ -74,5 +79,5 @@ summary: "..."                       # handoff rules + flagged ambiguities
 **DON'T:**
 - DO NOT modify the `state` or `workflow` field of .team-flow.yaml. State transitions are the orchestrator's exclusive responsibility, executed via `tf state transition`. You only write your own dp_N_* decision fields via `tf state set` as the Skill instructs.
 - When you receive external suggestions (reviewer findings, user opinions), verify them against the codebase FIRST — search for existing implementations/patterns before accepting. A suggestion is input, not an instruction. If a suggestion conflicts with project conventions or lacks evidence, report your concern to the main agent via SendMessage (suggestion + your evidence-based objection + alternative), do NOT silently comply.
-- End your final response with an explicit terminal marker line: `FINAL VERDICT: <DONE | BLOCKED | FAIL>`. Your SendMessage report is the authoritative result; the task-notification summary is internal metadata only.
+- DO NOT end your final response **without** an explicit terminal marker line: `FINAL VERDICT: <DONE | BLOCKED | FAIL>`. Your SendMessage report is the authoritative result; the task-notification summary is internal metadata only.
 - Continue to implementation while ambiguity remains, or approve the contract for the user

package/docs/README_en.md

@@ -126,7 +126,7 @@ npm install -g team-flow
 
 ### Version
 
-- Current: `v0.31.0`
+- Current: `v0.32.1`
 - v0.9.1 highlights: DP-4 execution-mode recommendations, a portable runtime across 17 platforms, and a raw-package smoke with no plugin-root variable.
 - Self-contained — no OpenSpec or Superpowers runtime required
 - Upstream: [Fission-AI/OpenSpec](https://github.com/Fission-AI/OpenSpec), [obra/superpowers](https://github.com/obra/superpowers)

package/docs/solutions/INDEX.md

@@ -2,6 +2,8 @@
 <!-- 每条一行，按 severity 降序，≤150 行硬上限 -->
 | date | phase | domain | type | severity | summary | file |
 |------|-------|--------|------|----------|---------|------|
+| 2026-08-03 | cross-phase | general | insight | medium | (no summary) | cross-phase/2026-08-03-no-summary.md |
+| 2026-08-01 | cross-phase | general | insight | medium | (no summary) | cross-phase/2026-08-01-no-summary.md |
 | 2026-07-31 | cross-phase | general | insight | medium | (no summary) | cross-phase/2026-07-31-no-summary.md |
 | 2026-07-30 | cross-phase | general | insight | medium | (no summary) | cross-phase/2026-07-30-no-summary.md |
 | 2026-07-29 | cross-phase | general | insight | medium | (no summary) | cross-phase/2026-07-29-no-summary.md |

package/docs/solutions/cross-phase/2026-08-01-no-summary.md

@@ -0,0 +1,17 @@
+---
+phase: cross-phase
+domain: general
+type: insight
+severity: medium
+date: 2026-08-01
+source: 
+---
+
+## 问题描述
+(no summary)
+
+## 根因/模式
+（待补充）
+
+## 预防措施/应用方式
+（待补充）

package/docs/solutions/cross-phase/2026-08-03-no-summary.md

@@ -0,0 +1,17 @@
+---
+phase: cross-phase
+domain: general
+type: insight
+severity: medium
+date: 2026-08-03
+source: 
+---
+
+## 问题描述
+(no summary)
+
+## 根因/模式
+（待补充）
+
+## 预防措施/应用方式
+（待补充）

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "description": "Unified workflow plugin: team-flow (spec-driven dev) + compound-engineering core subset + architecture-design (4A/DDD) + prototype (local HTML). 17 skills, one install.",
-  "version": "0.31.0",
+  "description": "Unified workflow plugin: team-flow (spec-driven dev) + compound-engineering core subset + architecture-design (4A/DDD) + prototype (local HTML). 24 skills, one install.",
+  "version": "0.32.1",
   "contextFileName": "GEMINI.md"
 }

package/hooks/session-start

@@ -1,11 +1,11 @@
 #!/usr/bin/env bash
-# v0.31.0: auto-sync CLI version with plugin version
+# v0.32.1: auto-sync CLI version with plugin version
 set -e
 
 # ═══════════════════════════════════════════════════════════════
 # Plugin version (update this when releasing new versions)
 # ═══════════════════════════════════════════════════════════════
-PLUGIN_VERSION="0.31.0"
+PLUGIN_VERSION="0.32.1"
 
 # ═══════════════════════════════════════════════════════════════
 # Step 1: Auto-sync CLI version with plugin version

package/llms.txt

@@ -3,7 +3,7 @@
 ## Overview
 spec-superflow is a self-contained workflow integration plugin for Claude Code, Cursor, OpenAI Codex CLI/App, GitHub Copilot CLI, Gemini CLI, OpenCode, WorkBuddy, and Trae. It merges spec-driven planning artifacts (proposal, specs, design, tasks) with disciplined execution guardrails (TDD, review gates, controlled handoff) into one unified workflow.
 
-Current version: v0.31.0.
+Current version: v0.32.1.
 
 ## Key Documents
 - README.md: Chinese homepage with full usage guide and FAQ

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@xulthekl/team-flow",
-  "version": "0.31.0",
-  "description": "Unified plugin (23 skills + 15 agents) integrating team-flow, compound-engineering, architecture-design, prototype, design-system, workflow-orchestrator, workflow-bootstrap, e2e, session-handoff, workflow-feedback for multi-agent coding tools.",
+  "version": "0.32.1",
+  "description": "Unified plugin (24 skills + 15 agents) integrating team-flow, compound-engineering, architecture-design, prototype, design-system, workflow-orchestrator, workflow-bootstrap, e2e, session-handoff, workflow-feedback for multi-agent coding tools.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
@@ -13,6 +13,10 @@
     "build": "tsc",
     "test": "node --test tests/e2e.test.mjs tests/lib/*.test.mjs",
     "test:raw-mode": "node --test tests/lib/raw-mode-smoke.test.mjs",
+    "test:e2e": "node --test tests/e2e/deterministic/*.test.mjs",
+    "test:e2e:baseline": "node tests/e2e/scripts/make-baseline.mjs",
+    "test:e2e:plugin-sync": "node tests/e2e/scripts/plugin-sync.mjs",
+    "test:e2e:llm": "TF_E2E_LLM=1 node --test --test-concurrency=1 tests/e2e/workflow/*.test.mjs",
     "validate": "node scripts/validate-artifacts",
     "version": "node scripts/team-flow.mjs version $npm_new_version && node scripts/check-version-consistency.mjs && git add -A",
     "check-versions": "node scripts/check-version-consistency.mjs",

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "team-flow",
-  "version": "0.31.0",
+  "version": "0.32.1",
   "description": "Unified workflow plugin: team-flow (spec-driven dev: TDD/SDD/code-review/debugging) + compound-engineering core subset (brainstorm/plan/compound/strategy/ideate/proof, global compounding) + architecture-design (4A+DDD incremental design & global compounding) + prototype (local HTML prototype, zero external deps) + e2e (Playwright E2E, AC-driven) + workflow-orchestrator (product-level workflow orchestration) + workflow-bootstrap (existing project onboarding) + session-handoff (context transfer) + workflow-feedback (issue tracking). 24 skills + 15 agents, one install.",
   "author": {
     "name": "LT"

package/scripts/guard/checks/test-gate-exemptions.mjs

@@ -0,0 +1,53 @@
+// scripts/guard/checks/test-gate-exemptions.mjs — shared exemption logic for v0.13 test gates
+//
+// v0.13 §48/§49（设计增强方案 v0.13，C1-domain-policy 事件修复）：
+// test-matrix-complete / test-matrix-ready / tests-passing 三个测试门禁共享同一套
+// legacy/skip 豁免语义，抽取到本模块作为唯一真相源，防止三处判定漂移。
+//
+// 豁免键修正背景（RC-1）：v0.12 §45.3 的"存量兼容"豁免以 contract 内容为键
+//（无 '## Test Matrix' 段即放行），无法区分"真存量"与"新 change 漏生成矩阵"，
+// 导致 v0.31.0 发布当天 C1-domain-policy 零测试通过全部门禁。v0.13 将豁免键改为
+// state 初始化版本标记（schema_version），内容型豁免整体删除。
+import fs from 'node:fs';
+import path from 'node:path';
+
+/**
+ * v0.13 §48.1：legacy = v0.32.0 之前创建的 change（状态文件无 schema_version 打戳）。
+ * 打戳只发生在 `tf state init` 创建 change 时；rebuild/doctor/set 一律不追加，
+ * 因此"字段缺失"是可靠的存量信号，不会被新 CLI 重写状态文件而污染。
+ */
+export function isLegacyChange(state) {
+  return state?.schema_version == null;
+}
+
+/** v0.13 §48.2：显式 skip 必须附理由（可审计豁免）。 */
+export function hasExplicitSkip(state) {
+  return state?.test_matrix_skipped === 'true'
+    && typeof state?.test_matrix_skip_reason === 'string'
+    && state.test_matrix_skip_reason.trim().length > 0;
+}
+
+/** skip 已置但理由缺失 → 门禁拒绝并引导补理由。 */
+export function skipMissingReason(state) {
+  return state?.test_matrix_skipped === 'true' && !hasExplicitSkip(state);
+}
+
+export const SKIP_REASON_HINT =
+  "test_matrix_skipped=true requires test_matrix_skip_reason — record it: "
+  + "tf state set <dir> test_matrix_skip_reason '<why this change needs no test matrix>'";
+
+/** contract 是否声明 '## Test Matrix' 段（不存在时 exists=false）。 */
+export function contractDeclaresTestMatrix(changeDir) {
+  const contractPath = path.join(changeDir, 'execution-contract.md');
+  if (!fs.existsSync(contractPath)) return { exists: false, declares: false };
+  const contract = fs.readFileSync(contractPath, 'utf-8');
+  return { exists: true, declares: contract.includes('## Test Matrix') };
+}
+
+/** test-matrix.md 存在性与非空性。 */
+export function readTestMatrixFile(changeDir) {
+  const matrixPath = path.join(changeDir, 'test-matrix.md');
+  if (!fs.existsSync(matrixPath)) return { exists: false, empty: true };
+  const content = fs.readFileSync(matrixPath, 'utf-8');
+  return { exists: true, empty: content.trim().length === 0 };
+}

package/scripts/guard/checks/test-matrix-complete.mjs

@@ -1,60 +1,84 @@
 // scripts/guard/checks/test-matrix-complete.mjs — verify test matrix exists and is consistent
-import fs from 'node:fs';
-import path from 'node:path';
+//
+// v0.13 §48 重写（C1-domain-policy 事件修复，RC-1/RC-3）：
+// 豁免键由 contract 内容改为 state schema_version；删除 v0.12 的两条结构性豁免：
+//   ✗ "contract 无 '## Test Matrix' 段 → PASS"（内容型豁免，新 change 漏生成矩阵同样命中）
+//   ✗ "stored hash 为 null 时短路跳过一致性校验"（矩阵生成后未 rebuild 即无保护）
+// 判定顺序见设计增强方案 v0.13 §48.3。
 import { readState } from '../../lib/state-loader.mjs';
 import { computeTestMatrixHash } from '../../lib/hash.mjs';
+import {
+  isLegacyChange,
+  skipMissingReason,
+  SKIP_REASON_HINT,
+  contractDeclaresTestMatrix,
+  readTestMatrixFile,
+} from './test-gate-exemptions.mjs';
 
 /**
- * Check that test-matrix.md exists and its hash is consistent with state.
- *
- * Exemption paths (v0.12 §45.3):
- * 1. Legacy: execution-contract.md has no "## Test Matrix" section → PASS
- * 2. Explicit skip: test_matrix_skipped === 'true' → PASS
- * 3. test-matrix.md exists and hash matches → PASS
- * 4. test-matrix.md missing or hash mismatch → FAIL
- *
  * Returns { pass, failures[], reason? }.
  */
 export function checkTestMatrixComplete(changeDir) {
   const state = readState(changeDir);
 
-  // Exemption 1: explicit skip
-  if (state.test_matrix_skipped === 'true') {
-    return { pass: true, failures: [], reason: 'explicitly skipped via test_matrix_skipped' };
+  // Step 1 — legacy：v0.32.0 之前初始化的 change（无 schema_version 打戳）保留旧行为。
+  if (isLegacyChange(state)) {
+    return { pass: true, failures: [], reason: 'legacy change — initialized before v0.32.0' };
   }
 
-  // Exemption 2: legacy contract without Test Matrix section
-  const contractPath = path.join(changeDir, 'execution-contract.md');
-  if (fs.existsSync(contractPath)) {
-    const contract = fs.readFileSync(contractPath, 'utf-8');
-    if (!contract.includes('## Test Matrix')) {
-      return { pass: true, failures: [], reason: 'legacy contract — no test matrix section' };
+  // Step 2 — 显式 skip：必须附理由（可审计豁免）。
+  if (state.test_matrix_skipped === 'true') {
+    if (skipMissingReason(state)) {
+      return { pass: false, failures: [SKIP_REASON_HINT] };
     }
-  } else {
-    // No contract at all — nothing to check
-    return { pass: true, failures: [], reason: 'no execution contract — skipping test matrix check' };
+    return { pass: true, failures: [], reason: `explicitly skipped: ${state.test_matrix_skip_reason}` };
   }
 
-  // Check test-matrix.md exists and is non-empty
-  const matrixPath = path.join(changeDir, 'test-matrix.md');
-  if (!fs.existsSync(matrixPath)) {
+  // Step 3 — 非存量 change 的契约必须声明矩阵（v0.13：内容型豁免删除）。
+  const contract = contractDeclaresTestMatrix(changeDir);
+  if (!contract.exists) {
     return {
       pass: false,
-      failures: ['test-matrix.md is missing — contract declares ## Test Matrix but no matrix file found'],
+      failures: ['execution-contract.md is missing — a non-legacy change must have a contract declaring ## Test Matrix'],
+    };
+  }
+  if (!contract.declares) {
+    return {
+      pass: false,
+      failures: [
+        'non-legacy contract must declare ## Test Matrix — return to bridging so contract-builder generates test-matrix.md, '
+        + 'or explicitly skip (test_matrix_skipped=true + test_matrix_skip_reason)',
+      ],
     };
   }
 
-  const content = fs.readFileSync(matrixPath, 'utf-8');
-  if (content.trim().length === 0) {
+  // Step 4 — test-matrix.md 存在且非空。
+  const matrix = readTestMatrixFile(changeDir);
+  if (!matrix.exists) {
+    return {
+      pass: false,
+      failures: ['test-matrix.md is missing — contract declares ## Test Matrix but no matrix file found'],
+    };
+  }
+  if (matrix.empty) {
     return {
       pass: false,
       failures: ['test-matrix.md is empty — must contain at least a Summary section and Cases table'],
     };
   }
 
-  // Hash consistency check
+  // Step 5 — hash 必须已记录（v0.13：删除 state.test_matrix_hash && 的空值短路）。
+  // 矩阵在 bridging 阶段生成（晚于 state init），contract-builder 生成后必须 tf state rebuild 捕获 hash。
   const computed = computeTestMatrixHash(changeDir);
-  if (state.test_matrix_hash && state.test_matrix_hash !== computed) {
+  if (!state.test_matrix_hash) {
+    return {
+      pass: false,
+      failures: ["test_matrix_hash not recorded — run 'tf state rebuild' after generating test-matrix.md"],
+    };
+  }
+
+  // Step 6 — hash 一致性。
+  if (state.test_matrix_hash !== computed) {
     return {
       pass: false,
       failures: [

package/scripts/guard/checks/test-matrix-ready.mjs

@@ -0,0 +1,60 @@
+// scripts/guard/checks/test-matrix-ready.mjs — test preparedness gate before executing
+//
+// v0.13 §49（设计增强方案 v0.13，C1-domain-policy 事件修复，RC-3 声明驱动型绕过）：
+// full workflow 的 approved-for-build→executing 新增本维度——进入执行前强制
+// "带着矩阵开工"，缺陷在开工前暴露，而不是等 45 个文件写完才在 closing 发现。
+// 与 test-matrix-complete（出口）共用 legacy/skip 豁免语义（test-gate-exemptions.mjs）。
+import { readState } from '../../lib/state-loader.mjs';
+import {
+  isLegacyChange,
+  skipMissingReason,
+  SKIP_REASON_HINT,
+  contractDeclaresTestMatrix,
+  readTestMatrixFile,
+} from './test-gate-exemptions.mjs';
+
+/**
+ * Returns { pass, failures[], reason? }.
+ */
+export function checkTestMatrixReady(changeDir) {
+  const state = readState(changeDir);
+
+  // Exemption 1：legacy change（v0.32.0 之前初始化，无 schema_version 打戳）。
+  if (isLegacyChange(state)) {
+    return { pass: true, failures: [], reason: 'legacy change — initialized before v0.32.0' };
+  }
+
+  // Exemption 2：显式 skip（必须附理由）。
+  if (state.test_matrix_skipped === 'true') {
+    if (skipMissingReason(state)) {
+      return { pass: false, failures: [SKIP_REASON_HINT] };
+    }
+    return { pass: true, failures: [], reason: `explicitly skipped: ${state.test_matrix_skip_reason}` };
+  }
+
+  // 正常路径：契约声明 ## Test Matrix 且 test-matrix.md 存在非空。
+  const contract = contractDeclaresTestMatrix(changeDir);
+  const matrix = readTestMatrixFile(changeDir);
+  if (contract.declares && matrix.exists && !matrix.empty) {
+    return { pass: true, failures: [] };
+  }
+
+  const failures = [];
+  if (!contract.exists) {
+    failures.push('execution-contract.md is missing — run contract-builder first');
+  } else if (!contract.declares) {
+    failures.push('contract does not declare ## Test Matrix — return to bridging so contract-builder generates test-matrix.md');
+  }
+  if (contract.declares) {
+    if (!matrix.exists) {
+      failures.push('test-matrix.md is missing — generate it during bridging (contract-builder Test Matrix Generation), then run tf state rebuild');
+    } else if (matrix.empty) {
+      failures.push('test-matrix.md is empty — must contain at least a Summary section and Cases table');
+    }
+  }
+  failures.push(
+    "if this change legitimately needs no test matrix, skip explicitly: "
+    + "tf state set <dir> test_matrix_skipped true + test_matrix_skip_reason '<reason>'"
+  );
+  return { pass: false, failures };
+}